Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims

The article discusses a recent surge in extortion-only cyber attacks, noting that 65% of related claims handled did not involve data encryption. In 2025, data theft accounted for 87% of ransomware claims, while only 13% involved encryption. Insurers recommend that organizations enhance prevention strategies over recovery, develop frameworks for ransom decisions, protect sensitive policy information, test preparedness through simulations, and track long-term financial impacts.

The report highlights the complexity of paying ransoms, as it often leads to future attacks, urging organizations to consider professional negotiation assistance.